Adobe, Microsoft Push Critical Fixes
Summary: Adobe and Microsoft each released security updates, with Adobe patching at least four critical Flash vulnerabilities and Adobe AIR, and Microsoft issuing four updates covering at least 11 unique flaws, including its final fixes for Office 2003 and Windows XP. Two Microsoft patches carried its critical rating: a cumulative Internet Explorer update (MS14-018) and a fix for Word and Office Web apps (MS14-017) that addresses a zero-day already being actively exploited.
Bottom line: The Word and Office Web apps flaw was already being exploited in the wild before the patch, and Microsoft used the same release to warn that attackers will increasingly target Windows XP now that it receives no further security updates after April 8.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026